NetWorker: i backup dei client hanno esito negativo in caso di mancata corrispondenza dei peer tra client e storage node

Riepilogo: I backup dei client NetWorker hanno esito negativo. "Impossibile ottenere la chiave di sessione dal CLIENT per l'autenticazione GSS con STORAGE NODE"

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.

Sintomi

I backup di un client del file system NetWorker hanno esito negativo con i seguenti errori osservati nei log delle sessioni:

181407:save: Step (1 of 7) for PID-87339: Save has been started on the client 'NETWORKER_CLIENT_NAME'.
174412:save: Step (2 of 7) for PID-87339: Running the backup on the client 'NETWORKER_CLIENT_NAME' for the save set 'SAVESET_NAME'.
180569:save: Identified a save for the backup with PID-87339 on the client 'NETWORKER_CLIENT_NAME'. Updating the total number of steps from 7 to 6.
174920:save: Step (3 of 6) for PID-87339: Contacting the NetWorker server through the nsrd process to obtain a handle to the target media device through the nsrmmd process for the save set 'SAVESET_NAME'.
174908:save:Saving the backup data in the pool 'POOL_NAME'.
206529:save: Unable to set up the direct save with server 'NETWORKER_SERVER_NAME'. Be sure network connectivity exists between client 'NETWORKER_CLIENT_NAME' and storage node '?' in both directions. Error: Could not get session key from NETWORKER_CLIENT_NAME for GSS authentication with STORAGE_NODE_NAME: Authentication error; why = Server rejected credential
98520:save: Falling back to agent-assisted indirect save 
208834:save: Step (4 of 6) for PID-87339: Successfully connected to the target media device through the nsrmmd process on the host 'NETWORKER_SERVER_NAME' for the save set 'SAVESET_NAME' (ssid SSID#)
174422:save: Step (5 of 6) for PID-87339: Reading the save sets and writing to the target device.
100690:save: SAVESET_NAME/: File index could not be obtained due to <Unable to do Index lookup of path 'SAVESET_NAME'. The Index session is invalid.
>.  Contents of this directory may not be properly backed up.  See save man page (Command Reference Guide) for more information.

174918:save: Step (6 of 6) for PID-87339: Unable to complete the backup. See the savegrp log to track the closure steps of the backup.
76677:save: Can't encode arguments
90019:save: save of 'SAVESET_NAME' to server 'NETWORKER_SERVER_NAME' failed.

Il dispositivo utilizzato per i backup è configurato tramite uno storage node NetWorker standalone. Il dispositivo non utilizza lo storage node integrato del server NetWorker.

La daemon.raw dello storage node NetWorker segnala problemi di mancata corrispondenza peer per lo stesso client:

Linux: /nsr/logs/daemon.raw
Windows: [Unità di installazione]:\Program Files\EMC NetWorker\nsr\logs\daemon.raw

NetWorker: Come utilizzare nsr_render_log per eseguire il rendering .raw file di log

89879 MM/DD/YYYY HH:mm:SS  nsrexecd GSS critical An authentication request from NETWORKER_CLIENT_NAME was denied. The 'NSR peer information' provided did not match the one stored by STORAGE_NODE_NAME. To accept this request, delete the 'NSR peer information' resource with the following attributes from STORAGE_NODE_NAME's NSRLA database: name: NETWORKER_CLIENT_NAME; NW instance ID: 6042beae-00000004-270237f6-67057d43-00015000-2317bb56; peer hostname: NETWORKER_CLIENT_NAME
89879 MM/DD/YYYY HH:mm:SS  nsrexecd GSS critical An authentication request from NETWORKER_CLIENT_IP was denied. The 'NSR peer information' provided did not match the one stored by STORAGE_NODE_NAME. To accept this request, delete the 'NSR peer information' resource with the following attributes from STORAGE_NODE_NAME's NSRLA database: name: NETWORKER_CLIENT_NAME; NW instance ID: 6042beae-00000004-270237f6-67057d43-00015000-2317bb56; peer hostname: NETWORKER_CLIENT_IP

Causa

Si è verificato un problema relativo al certificato peer tra il client NetWorker e lo storage node NetWorker.

Risoluzione

Deselezionare "NSR peer information" per lo storage node e il client NetWorker su entrambi gli host.

Sul client NetWorker:
nsradmin -p nsrexeced
print type: nsr peer information; name: STORAGE_NODE_NAME
delete
yes
quit
Esempio:
[root@lnx-srvr01 ~]# nsradmin -p nsrexecd
NetWorker administration program.
Use the "help" command for help, "visual" for full-screen mode.
nsradmin> p type: nsr peer information; name: storage.networker.lan
                        type: NSR peer information;
               administrator: root,
                              "user=nsrnmc,host=lnx-srvr01.networker.lan",
                              "user=root,host=lnx-srvr01.networker.lan";
                        name: storage.networker.lan;
               peer hostname: storage.networker.lan;
          Change certificate: ;
    certificate file to load: ;
nsradmin> d
                        type: NSR peer information;
               administrator: root,
                              "user=nsrnmc,host=lnx-srvr01.networker.lan",
                              "user=root,host=lnx-srvr01.networker.lan";
                        name: storage.networker.lan;
               peer hostname: storage.networker.lan;
          Change certificate: ;
    certificate file to load: ;
Delete? y
deleted resource id 1.0.4.4.48.4.0.0.187.151.35.103.192.168.0.6(1)
nsradmin> q
[root@lnx-srvr01 ~]#
Assicurarsi che il client NetWorker sia in grado di raggiungere il processo nsrexecd sullo storage node:
nsradmin -p nsrexecd -s STORAGE_NODE_NAME
Esempio:
[root@lnx-srvr01 ~]# nsradmin -p nsrexecd -s storage.networker.lan
NetWorker administration program.
Use the "help" command for help, "visual" for full-screen mode.
nsradmin> quit
[root@lnx-srvr01 ~]#

Sullo storage node NetWorker:
nsradmin -p nsrexeced
print type: nsr peer information; name: NETWORKER_CLIENT_NAME
delete
yes
quit
Esempio:
[root@storage ~]# nsradmin -p nsrexecd
NetWorker administration program.
Use the "help" command for help, "visual" for full-screen mode.
nsradmin> p type: nsr peer information; name: lnx-srvr01.networker.lan
                        type: NSR peer information;
               administrator: root, "user=nsrnmc,host=storage.networker.lan",
                              "user=root,host=storage.networker.lan";
                        name: lnx-srvr01.networker.lan;
               peer hostname: lnx-srvr01.networker.lan;
          Change certificate: ;
    certificate file to load: ;
nsradmin> d
                        type: NSR peer information;
               administrator: root, "user=nsrnmc,host=storage.networker.lan",
                              "user=root,host=storage.networker.lan";
                        name: lnx-srvr01.networker.lan;
               peer hostname: lnx-srvr01.networker.lan;
          Change certificate: ;
    certificate file to load: ;
Delete? y
deleted resource id 1.0.6.182.118.0.0.0.128.3.252.102.192.168.0.3(1)
nsradmin> q
[root@storage ~]#
Assicurarsi che lo storage node NetWorker sia in grado di raggiungere il processo nsrexecd sul client:
nsradmin -p nsrexecd -s NETWORKER_CLIENT_NAME
Esempio:
[root@storage ~]# nsradmin -p nsrexecd -s lnx-srvr01.networker.lan
NetWorker administration program.
Use the "help" command for help, "visual" for full-screen mode.
nsradmin> quit
[root@storage ~]#

Informazioni aggiuntive

Prodotti interessati

NetWorker

Prodotti

NetWorker Family
Proprietà dell'articolo
Numero articolo: 000243005
Tipo di articolo: Solution
Ultima modifica: 02 ott 2025
Versione:  2
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.